Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File:                     mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier:          UrRyo/Qnj4NHJ0KwNgCx+YifF2N5PZSG6knOIXqphJA=
Subject key identifier:   66:7F:21:95:91:15:5A:A6:73:04:C8:B0:A7:E3:A1:25:E6:75:37:E9
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer:       /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial:       01984777DF9C00E928AE537B0C41C5833A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number:          072C
Signing time:             Sat 26 Jul 2025 16:01:34 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:34 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:34 +0000
Files and hashes:         1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: heKWHMrsrZgMqzKyttZrV/DCPz3kobd9hWLnkZ7Hs4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:df:9c:00:e9:28:ae:53:7b:0c:41:c5:83:3a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
        Validity
            Not Before: Jul 26 16:01:34 2025 GMT
            Not After : Jul 27 16:01:34 2025 GMT
        Subject: CN=667f219591155aa67304c8b0a7e3a125e67537e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:23:3c:dd:95:d2:11:d1:37:fe:08:ef:11:
                    ef:4f:73:ea:61:0d:ca:e3:3f:c3:6a:a8:18:f9:62:
                    e9:a2:d5:bf:e3:af:ac:72:8e:84:0e:f3:5f:d6:d5:
                    f0:5d:5a:fe:ab:4d:cf:69:95:4a:9d:42:88:33:cb:
                    2e:48:cb:4c:ff:54:1e:aa:7c:0b:34:16:ae:f6:69:
                    5f:c1:32:b0:e5:26:24:e3:e4:98:61:4a:74:ec:2d:
                    92:55:13:5e:80:5c:4f:72:9e:99:d3:79:53:2b:97:
                    c4:80:e9:a2:17:7a:c9:39:f3:47:6c:7a:a7:a6:a5:
                    73:db:ef:ed:a3:6e:8c:ba:84:26:8a:96:ec:4a:e8:
                    c9:e7:20:ed:0c:97:5c:60:f9:1c:31:9a:80:7f:1f:
                    49:1d:83:89:df:f9:e5:ba:e2:0d:9c:09:6d:87:7e:
                    b0:02:8a:33:76:f6:da:ca:3b:5d:42:b6:a9:63:34:
                    55:7a:11:9b:1b:5f:d4:33:ab:da:64:ae:37:ce:25:
                    eb:1b:27:12:d9:87:f1:6b:5d:26:43:c0:09:43:53:
                    26:66:06:f9:ed:ac:9e:8c:47:9f:5f:2c:d0:43:3d:
                    43:00:5c:fe:b2:7b:e7:4f:c4:4b:71:d6:8c:2e:bd:
                    2c:6c:fe:58:ce:f5:1c:4c:a1:a6:d4:35:1a:2f:90:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:21:95:91:15:5A:A6:73:04:C8:B0:A7:E3:A1:25:E6:75:37:E9
            X509v3 Authority Key Identifier:
                keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:7d:47:f6:21:06:58:2e:1a:bd:f6:c6:41:e8:6b:c8:81:
         06:b5:ce:f8:5f:2b:6e:69:3e:db:92:3b:a5:29:fd:44:e3:79:
         39:18:bc:69:5a:87:0d:13:73:71:23:9f:87:4d:22:6b:eb:25:
         96:65:53:71:51:f9:f6:4c:07:77:f8:99:29:50:f4:65:1c:6a:
         6e:ff:8a:46:4c:19:19:0c:e5:98:e7:35:3e:2d:28:c8:98:5e:
         96:70:9d:63:27:af:69:01:41:c6:68:c1:3a:c0:9c:d0:0f:c5:
         7b:55:7b:19:cc:07:03:33:79:dc:2a:25:f6:16:79:4c:87:fb:
         ca:3c:d5:44:4f:b1:37:42:80:21:d5:c8:35:50:38:13:ea:d1:
         21:fb:5e:7a:80:b7:e7:5d:00:e6:28:b3:35:a0:e7:55:aa:62:
         da:91:7b:72:7b:21:ee:14:87:0c:49:c2:bb:4b:17:19:75:7b:
         d4:34:ad:9f:a3:17:b2:9d:31:d2:2d:10:4f:b1:af:a7:98:ed:
         9f:72:1a:55:4f:b2:8c:46:ee:4c:da:bc:01:2b:c1:f7:7f:83:
         1c:1a:b5:18:48:2f:20:1a:de:06:ee:59:9b:92:de:82:9d:b4:
         43:b5:9e:14:ea:7a:25:d3:5b:8e:4a:85:06:49:9d:ff:d3:7d:
         6c:06:31:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd9+cAOkorlN7DEHFgzohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDFhNWVjZGUyZTc5NTkzMjU5MTEwNmQwODIzZDBkMTU0
ZjcwMDIwHhcNMjUwNzI2MTYwMTM0WhcNMjUwNzI3MTYwMTM0WjAzMTEwLwYDVQQD
Eyg2NjdmMjE5NTkxMTU1YWE2NzMwNGM4YjBhN2UzYTEyNWU2NzUzN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg8jPN2V0hHRN/4I7xHvT3PqYQ3K
4z/DaqgY+WLpotW/46+sco6EDvNf1tXwXVr+q03PaZVKnUKIM8suSMtM/1QeqnwL
NBau9mlfwTKw5SYk4+SYYUp07C2SVRNegFxPcp6Z03lTK5fEgOmiF3rJOfNHbHqn
pqVz2+/to26MuoQmipbsSujJ5yDtDJdcYPkcMZqAfx9JHYOJ3/nluuINnAlth36w
AoozdvbayjtdQrapYzRVehGbG1/UM6vaZK43ziXrGycS2Yfxa10mQ8AJQ1MmZgb5
7ayejEefXyzQQz1DAFz+snvnT8RLcdaMLr0sbP5YzvUcTKGm1DUaL5CcUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ/IZWRFVqmcwTIsKfjoSXmdTfpMB8GA1UdIwQY
MBaAFJoBpezeLnlZMlkRBtCCPQ0VT3ACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjNjMDQtYjA3ZS00YzNhLTlmNDUt
ZmUyNDc0ZDJmMDdjLzEvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NjNjMDQtYjA3ZS00YzNhLTlmNDUtZmUyNDc0ZDJmMDdj
LzEvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjZ9R/Yh
BlguGr32xkHoa8iBBrXO+F8rbmk+25I7pSn9RON5ORi8aVqHDRNzcSOfh00ia+sl
lmVTcVH59kwHd/iZKVD0ZRxqbv+KRkwZGQzlmOc1Pi0oyJhelnCdYyevaQFBxmjB
OsCc0A/Fe1V7GcwHAzN53Col9hZ5TIf7yjzVRE+xN0KAIdXINVA4E+rRIfteeoC3
510A5iizNaDnVapi2pF7cnsh7hSHDEnCu0sXGXV71DStn6MXsp0x0i0QT7Gvp5jt
n3IaVU+yjEbuTNq8ASvB93+DHBq1GEgvIBreBu5Zm5Legp20Q7WeFOp6JdNbjkqF
Bkmd/9N9bAYx2w==
-----END CERTIFICATE-----